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FIGURE 2 




1) LOAD CLUSTER CONFIGURATION DATA FROM PRIMARY AFC 
CONFIGURATION REPOSITORY VIA CLUSTER COMMUNICATION BUS 

2) STORE CONFIGURATION DATA IN THE LOCAL CONFIGURATION 
DATA 

3) IF PRIMARY AFC CONFIGURATION DATA IS NOT AVAILABLE USE 
I OCAI CONFIGURATION DATA 



CONFIGURE THE CLUSTER NETWORK CONTROLLER TO: 

1) AUTODISCOVER STATE AND UTILIZATION OF FAI LOVER ENGINE IN 
OTHER AFC MEMEBERS OF THE CLUSTER CONNECTED TO THE 
CLUSTER COMMUNICATION NETWORK 

2) REGISTER THE AFC AS LISTENER FOR CHANGES IN THE PRIMARY 
AFC CONFIGURATION REPOSITORY 



START THE HEARTBEAT ENGINE TO: 

1) READ CONFIGURATION DATA FROM LOCAL AFC CONFIGURATION 
DATA 

2) ESTABLISH HEART BEAT COMMUNICATION WITH AFC IDENTIFIED 
FROM THE PROTECTED PEER NODE LIST 

3) REGISTER THE FAILOVER ENGINE TO BE NOTIFIED IN CASE OF 
FAILURES IN PROTECTED PEER NODES 

4) NOTIFY THE HEARTBEAT ENGINE FOR CONFIGURATION LOCAL 
DATA UPDATES 



ADVANTAGEOUSLY UPDATE THE LOCAL CONFIGURATION DATA IN 
CASE OF: 

1) NOTIFICATION BY THE CLUSTER NETWORK CONTROLLER ABOUT 
CHANGES IN THE PRIMARY AFC CONFIGURATION REPOSITORY 

2) NOTIFICATION BY THE CLUSTER NETWORK CONTROLLER ABOUT 
STATE CHANGES OF FAILOVER ENGINE IN OTHER AFC MEMBERS OF 
THE CLUSTER 

3) NOTIFICATION BY THE HEARTBEAT ENGINE, THAT ONE OR MORE 
PROTECTED NODES FAILED 



SEND UPDATE TO CLUSTER NETWORK CONTROLLER FOR 
DISTRIBUTION TO PRIMARY AFC CONFIGURATION REPOSITORY AND 
OTHER AFC, IF A FAILURE ENGINE STATE CHANGES (E.G. IN 
RESPONSE TQ A DEVICE FAILURE 
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FIGURE 3 
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FIGURE 4 
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FIGURE 5 



Backup priority list (aU nodes) 
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FIGURE 6 



Backup priority list (Node 4] 
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FIGURE 7 



Backup priority list (All other nodes) 
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FIGURE 8 



Backup priority list (all nodes) 



Protected node 


Node 1 


Node 2 


Node 3 


- Node 4 


Node 5 


Primary backup 




r N ' 


Node5 


Node 5 




Secondary 
Backup 


[Node 5 


Node 5 




N 


r 


Node state 


z: — 






• >SN 





800 



802 



804 



806 



FIGURE 9 



Backup priority list (all nodes) 
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MAINTAIN TRANSITION INFORMATION IDENTIFYING A SECOND CURRENTLY NON- 
OPERATIONAL PROCESSING DEVICE FOR TAKING OVER EXECUTION OF TASKS 
DESIGNATED TO BE PERFORMED BY A FIRST PROCESSING DEVICE IN RESPONSE 
TO AN OPERATIONAL FAILURE OF THE FIRST PROCESSING DEVICE 
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UPDATE THE TRANSITION INFORMATION IN RESPONSE TO AT LEAST 
ONE OF, (A) DETECTION OF AN OPERATIONAL FAILURE OF ANOTHER PROCESSING 
DEVICE IN THE GROUP AND (B) DETECTION OF AVAILABLE MEMORY OF ANOTHER 
PROCESSING DEVICE OF THE GROUP BEING BELOW A PREDETERMINED 

THRESHOLD 
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DETECT AN OPERATIONAL FAILURE OF THE FIRST PROCESSING DEVICE 
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INITIATE EXECUTION, BY THE SECOND PROCESSING DEVICE, OF TASKS 
DESIGNATED TO BE PERFORMED BY THE FIRST PROCESSING DEVICE IN 
RESPONSE TO DETECTION OF AN OPERATIONAL FAILURE OF THE FIRST 

PROCESSING DEVICE 
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DYNAMICALLY UPDATE THE TRANSITION INFORMATION IN RESPONSE TO 
COMMUNICATION FROM ANOTHER PROCESSING DEVICE OF THE GROUP 
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FIGURE 10 
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